Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tYhbFonSG0g5NmFC_xM3z1Tpu-I.roa
File: tYhbFonSG0g5NmFC_xM3z1Tpu-I.roa (raw, json)
Hash identifier: rkgFukClmC5/s6ZswNGY3CJlhKSc3Dif3dTGS69qdSE=
Subject key identifier: B5:88:5B:16:89:D2:1B:48:39:36:61:42:FF:13:37:CF:54:E9:BB:E2
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCCACC6F429351B36C6AA27A6B6A89
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tYhbFonSG0g5NmFC_xM3z1Tpu-I.roa
Signing time: Tue 02 Jan 2024 10:34:02 +0000
ROA not before: Tue 02 Jan 2024 10:34:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 193.163.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:ca:cc:6f:42:93:51:b3:6c:6a:a2:7a:6b:6a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5885b1689d21b4839366142ff1337cf54e9bbe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e9:44:7f:ff:f8:1a:30:c5:ef:9c:1a:40:56:
d7:73:30:c9:fe:bd:f2:22:6f:eb:a2:08:64:5d:1c:
4f:17:f2:86:7e:a1:ae:7f:74:fa:1d:c5:da:24:cf:
08:dd:07:2e:46:d1:1d:93:0c:9a:c3:58:14:b7:4e:
d2:28:93:6d:c6:96:16:ea:fa:fb:06:46:6b:ec:a2:
df:b6:20:c9:2c:0c:ac:b5:1f:72:99:0c:81:11:03:
24:38:6d:5d:83:e3:ca:26:11:cb:5d:3f:0a:26:1a:
c6:47:e3:67:d0:cc:80:ec:a7:63:a9:fd:48:c2:92:
4f:6a:8b:22:d9:6d:32:71:5e:cd:fc:bb:52:63:a8:
0c:56:9c:27:74:ae:50:3c:26:81:21:ca:cf:9b:d8:
29:76:c0:d3:4c:19:c8:f6:29:0a:9a:21:f0:18:ef:
00:21:ad:1f:ae:ec:26:e8:b3:f2:52:80:f5:f7:e8:
df:43:3c:29:3c:80:b1:7f:f7:11:ec:d5:db:a4:cd:
a5:7b:e6:3b:d8:ba:1d:17:3e:db:2d:4d:c5:cf:76:
c9:0b:1e:ce:b8:a8:1b:73:98:f9:08:41:be:69:9a:
f4:41:f2:b2:90:5d:af:13:51:bf:00:36:fc:7f:91:
47:73:4f:4b:2a:f5:75:0b:76:ee:51:b2:f1:43:b6:
fe:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:88:5B:16:89:D2:1B:48:39:36:61:42:FF:13:37:CF:54:E9:BB:E2
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tYhbFonSG0g5NmFC_xM3z1Tpu-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.85.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:9d:52:59:72:32:52:04:c3:e3:25:7e:bc:16:41:6e:2f:d4:
94:48:64:6d:dd:43:88:f4:4e:ec:fa:9d:89:41:cc:10:18:1f:
f6:de:da:ca:b1:a5:47:21:1a:b2:28:5b:49:fb:21:55:c4:7a:
34:b9:48:a8:51:1a:a3:a2:65:95:d0:1d:32:0d:64:14:5b:69:
ba:92:b0:19:2b:cd:04:01:28:59:14:11:df:99:fb:94:a9:df:
df:da:98:e5:7d:48:9b:86:c4:23:23:20:19:a2:f0:eb:dd:fb:
ec:8e:e6:21:fe:b2:4c:f1:76:7e:c7:38:53:ce:29:96:37:87:
94:fc:ca:c3:a3:44:7e:19:e8:c6:47:37:8d:6b:3e:88:47:0d:
94:80:81:96:c2:dc:80:0c:4f:91:61:71:ab:9a:65:5c:3d:da:
31:28:cf:0e:7c:73:6f:c3:53:29:2a:aa:e1:e8:88:a2:63:23:
4f:0d:a0:24:11:f9:4d:73:5e:f0:46:85:9c:88:56:d2:46:54:
68:a4:0d:34:b0:85:51:f8:51:c0:20:65:4f:5b:d2:6c:e3:55:
8b:49:f9:59:b9:3f:c7:97:e1:da:0d:7b:89:bb:75:9f:93:d3:
7b:3d:4e:a1:10:0d:ea:98:a3:07:4e:7a:29:46:a0:74:a5:46:
39:3c:88:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 21:09:49 2024 by rpki-client on console-ams.rpki-client.org